Skip to content

Security: makepay-io/makepay-unreal

Security

SECURITY.md

Security Policy

Supported Versions

Security fixes are prepared for the latest tagged release and the main branch.

Reporting A Vulnerability

Report suspected vulnerabilities to info@makepay.io with enough detail to reproduce the issue. Please avoid public disclosure until the MakePay team has confirmed impact and prepared a fix.

Unreal Integration Rules

  • Never ship MakePay credentials in Unreal source, config, Blueprints, pak files, or save data.
  • Create checkout sessions through your own backend.
  • Verify MakePay webhooks on the backend before granting durable entitlements.
  • Treat return links as untrusted client-side UI hints.
  • Bind ExternalId to an authenticated player/order/entitlement record on the backend.

There aren't any published security advisories